Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File:                     7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier:          Y7EQVyYCfNVeqJlwnfhVxK0CZPimKMP07W2/h6kUvUU=
Subject key identifier:   B8:8C:BD:D2:76:A0:56:A8:D0:A3:D0:1A:B9:1B:D8:42:84:49:5B:2E
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer:       /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial:       0191F9A2AA2497BD127C2400AD1422F267EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number:          B1
Signing time:             Mon 16 Sep 2024 07:01:12 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:12 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:12 +0000
Files and hashes:         1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: SwhMVhiuweWJPsYpaA9d2kkeDSoqsPM9YGuQINreye4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:aa:24:97:bd:12:7c:24:00:ad:14:22:f2:67:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
        Validity
            Not Before: Sep 16 07:01:12 2024 GMT
            Not After : Sep 17 07:01:12 2024 GMT
        Subject: CN=b88cbdd276a056a8d0a3d01ab91bd84284495b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ad:65:1b:67:c7:9b:ca:d5:8d:64:60:a9:cf:
                    b1:ce:6d:4c:dc:fd:94:18:5a:e3:5c:ab:e0:bd:e7:
                    5c:80:ac:c5:25:ed:ec:8d:93:17:bd:da:42:a0:4b:
                    4e:ca:e1:da:8a:5e:71:32:40:c0:b2:ad:f4:7c:ff:
                    3c:97:4f:37:6b:d8:67:bb:70:0e:8f:6a:7a:e0:d3:
                    bc:be:a3:a0:06:46:28:32:19:06:1a:f6:b1:90:2f:
                    7e:77:b0:f8:2a:c0:a1:98:06:02:ab:55:e3:55:27:
                    e6:f5:a2:06:0b:5f:7e:d0:8f:bf:04:4e:52:21:db:
                    a1:9c:6c:3d:b5:09:a4:1e:d2:9f:30:f0:5c:d5:33:
                    88:04:6d:cd:f2:8a:5d:09:bd:bb:41:ff:44:be:cf:
                    5e:32:92:ba:21:8d:24:d7:44:35:3c:7f:40:55:35:
                    81:cb:dd:9c:8a:30:ba:38:34:35:80:93:a3:d5:67:
                    8c:0e:93:22:70:11:40:b2:0c:77:62:52:73:c4:94:
                    b0:3c:65:63:df:d9:6d:7d:59:cd:4b:db:f9:5c:6e:
                    c8:33:84:24:95:13:c4:ba:a2:74:2f:7a:06:8a:35:
                    f2:b9:1a:ea:3f:71:de:0d:90:ad:5d:6c:f5:2a:00:
                    86:ba:d8:5d:2c:3c:24:db:d0:29:78:d4:64:d7:a8:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8C:BD:D2:76:A0:56:A8:D0:A3:D0:1A:B9:1B:D8:42:84:49:5B:2E
            X509v3 Authority Key Identifier:
                keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b1:a5:aa:76:c3:b0:cd:c6:85:6a:bf:91:04:61:ae:de:a6:
         ff:c4:94:59:5e:ef:14:be:44:12:fc:ba:21:67:fe:e7:0d:fe:
         18:21:a7:3f:1b:03:62:9c:74:5f:47:73:03:ef:50:75:d2:6b:
         74:72:e5:1f:98:2b:e8:e6:29:43:2d:1c:4b:11:8d:e6:65:19:
         6b:05:d0:4f:2c:6f:0d:33:e8:27:df:00:72:5a:84:ce:08:a9:
         44:f3:82:07:d4:b5:26:25:ae:0b:90:da:48:14:b1:1b:a4:4f:
         40:df:8c:87:73:a2:0b:ff:a5:ac:dd:5d:93:d0:40:7b:65:5a:
         2d:60:6f:8a:fa:21:9e:13:9f:8f:6c:b7:eb:c4:96:b1:94:ed:
         5c:d0:3a:4c:4c:13:21:76:7f:87:64:06:06:66:9d:05:db:32:
         d4:9c:cd:56:ad:ac:8c:1a:76:58:3f:34:cd:86:01:94:10:b3:
         02:81:2d:2e:ea:c4:11:23:0f:d1:5f:3b:73:45:de:25:7d:2b:
         bc:5e:19:c6:95:66:bf:21:85:7f:29:1b:af:0e:2f:ad:32:9a:
         3f:0d:5b:4a:fb:82:bc:2d:36:16:03:3c:24:1d:81:63:95:c9:
         7a:fd:d7:5c:e5:49:a3:c8:51:95:25:58:82:1e:bc:d6:22:28:
         5b:50:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----